An issue was discovered in USBGuard before 1.1.0. On systems with the usbguard-dbus daemon running, an unprivileged user could make USBGuard allow all USB devices to be connected in the future.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade usbguard-notifierUpgrade usbguardUpgrade usbguard-dbusUpgrade usbguard-toolsUpgrade usbguard-selinux | Jan 16, 2023 | Feb 24, 2022 |
| Centos_linux | — | Upgrade usbguard-notifierUpgrade usbguard-debugsourceUpgrade usbguardUpgrade usbguard-dbus-debuginfoUpgrade usbguard-dbusUpgrade usbguard-selinuxUpgrade usbguard-toolsUpgrade usbguard-debuginfoUpgrade usbguard-notifier-debuginfoUpgrade usbguard-tools-debuginfo | Jan 13, 2023 | Feb 24, 2022 |
| Debian | — | Upgrade usbguard | Apr 14, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade usbguard-dbusUpgrade usbguard-toolsUpgrade usbguard-notifierUpgrade usbguardUpgrade usbguard-selinux | Jan 13, 2023 | Feb 24, 2022 |
| Redhat_linux | — | Upgrade usbguard-notifierNo solution existsUpgrade usbguard-selinuxUpgrade usbguard-debugsourceUpgrade usbguard-tools-debuginfoUpgrade usbguard-debuginfoUpgrade usbguard-notifier-debuginfoUpgrade usbguard-dbus-debuginfoUpgrade usbguard-toolsUpgrade usbguardUpgrade usbguard-dbus | Nov 30, 2022 | Feb 24, 2022 |
| Rocky_linux | — | Upgrade usbguard-debuginfoUpgrade usbguardUpgrade usbguard-dbusUpgrade usbguard-notifier-debuginfoUpgrade usbguard-toolsUpgrade usbguard-tools-debuginfoUpgrade usbguard-dbus-debuginfoUpgrade usbguard-debugsourceUpgrade usbguard-notifier | Mar 12, 2024 | Feb 24, 2022 |
| Suse | — | Upgrade libusbguard1Upgrade usbguardUpgrade usbguard-toolsUpgrade usbguard-devel | Aug 9, 2024 | Feb 24, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub